Workplace Violence Prevention

When people hear "workplace violence," they picture one thing: a stranger with a weapon, a sudden and dramatic attack out of nowhere. That image is real, but it is only one corner of the problem, and treating it as the whole thing is exactly how sites leave themselves exposed. OSHA and NIOSH do not treat workplace violence as a single event. They treat it as four different hazards, grouped by who the aggressor is in relation to the workplace — because that relationship is what determines the warning signs you would see and the defense that actually works. A robbery, a client who turns on you, a conflict with a coworker, and an employee's personal relationship following them to work are four different problems that happen to share a name. This Workplace Violence Prevention Toolbox Talk (Safety Talk / Tailgate Talk) is about seeing all four, because the ones that get ignored are usually the ones that were building in plain sight.

Here is the distinction that carries this whole talk: "workplace violence" sounds like one thing — the stranger with a weapon — but OSHA treats it as four different hazards sorted by who the aggressor is: an outsider committing a crime, a client or member of the public, a coworker, or someone from an employee's personal life; and because each one gives different warning signs and needs a different defense, a site that prepares only for the dramatic stranger has left the other three doors open — and those three usually build slowly and visibly enough to stop, if someone is watching for them. The four types are worth naming plainly. Type I is criminal intent: the aggressor has no legitimate relationship to the workplace and the violence happens during a crime like robbery or trespass. Type II is customer or client violence: the aggressor is someone receiving the workplace's services or present as a member of the public. Type III is worker-on-worker: the aggressor is a current or former employee, and its most common form is not a physical attack at all but escalating verbal and emotional abuse. Type IV is personal relationship violence: the aggressor has a personal relationship with an employee — most often an intimate partner — and the violence spills over from their life into the workplace. The dramatic stranger is only Type I. The other three are more common, and unlike a sudden robbery, they usually give warning.

Where the boundary of this talk sits#

Workplace violence connects to several other talks, and this one owns prevention across all four types. The active assailant talk owns the acute response to an attack in progress — the run, hide, fight decisions in the moment. The bullying and harassment talk owns the interpersonal conduct that, left unchecked, can escalate toward Type III. The site security talk owns physical access control that reduces Type I exposure. This talk owns the prevention program as a whole: recognizing that violence comes in four types, watching for the warning signs each one gives, building a reporting path so those signs reach someone who can act, and routing concerns to the people trained to handle them rather than confronting anyone yourself. Where the focus is the attack already underway, the harassment itself, or the fence line, those talks own the detail; this one owns seeing the whole shape of the hazard and stopping it before it becomes any of those.

The dramatic stranger is only one of four#

The reason the four-type framework matters is that each type has a different source, a different warning pattern, and a different defense — so a plan built around only one of them protects you against only one of them. Type I, the outsider committing a crime, is the one everyone pictures, and it is addressed mostly through physical security: access control, lighting, cash-handling procedures, and awareness of vulnerable moments like being alone in an isolated area. But Type II, the client or member of the public who becomes aggressive, is defended very differently — through de-escalation, positioning, clear procedures for difficult interactions, and knowing how to disengage and summon help. Type III, the coworker, almost never begins as violence; it begins as conflict, threats, intimidation, or escalating verbal abuse, and its defense is a culture where those early behaviors get reported and addressed rather than tolerated. Type IV, the personal relationship spilling into work, is defended through awareness — knowing that a worker being followed, harassed, or contacted at work by someone from their personal life is a workplace safety issue, and having a way to respond that protects them. Preparing only for the stranger with a weapon leaves the three doors that open more often standing wide.

The common ones give warning — if someone is watching#

The single most useful fact about workplace violence is that the most common types rarely erupt without warning. Type III and Type IV, in particular, almost always build over time and leave a visible trail: escalating conflict, direct or veiled threats, intimidation, a fixation on a grievance, a marked change in someone's behavior, or a worker who seems frightened, is being followed, or is getting unwanted contact at work. These are not certainties of violence — most conflict never becomes violent — but they are the signals that let a prepared site intervene early, while intervention is still possible. The problem is that warning signs only help if someone is watching for them and knows what to do with them. A threat that everyone hears but nobody reports, a pattern of intimidation that gets written off as "just how they are," a frightened worker whose situation is treated as a personal matter rather than a safety concern — these are the failures that let a slow-building situation reach the point of violence. Seeing the warning signs is half of prevention; the other half is having somewhere for them to go.

Prevention is a program, not a poster#

Because there is no single OSHA standard that hands you a compliance checklist for workplace violence, prevention cannot be a poster on the wall or a line in the handbook — it has to be an actual program the site runs. That program starts with an honest assessment of which of the four types this particular site and its workers actually face, because a remote highway work zone, a facility open to the public, and a crew with internal tensions have very different exposures. It includes a clear, usable reporting path, so that when someone sees a threat, an escalating conflict, or a worker in a frightening personal situation, there is an obvious person to tell and a real expectation that the report will be taken seriously and acted on. It includes training so workers know the warning signs, know how to de-escalate a tense interaction and disengage safely, and know the reporting process before they need it. And it includes treating reports of the slow-building types — coworker conflict, a worker being harassed or followed — as genuine safety issues rather than personal problems to be waved off, because those are precisely the ones that give warning before they explode. The recognized-hazard duty does not tell you exactly what your program must contain, but it does require that you have one and that it addresses the violence your site can reasonably foresee.

Route it, don't confront it#

There is one principle that has to sit above all the tactics, because getting it wrong turns a prevention effort into a new danger: the goal is to recognize and report, not to confront. When you see a warning sign — a threat, an escalating conflict, a coworker fixated on a grievance, a worker being followed — the right response is to route it to the people trained and authorized to handle it: your supervisor, site security, the safety or HR staff, and where there is an immediate threat, law enforcement. It is not to take it on yourself, to investigate it, to warn the aggressor off, or to intervene physically. Confronting a person who is escalating toward violence is exactly the action most likely to trigger the event you are trying to prevent, and it puts you directly in harm's way. The same restraint applies in the moment of a tense interaction with an aggressive client or member of the public: the objective is to de-escalate, create distance, disengage, and get help — not to win the confrontation or stand your ground. Prevention works by getting the right information to the right people early, and by getting yourself and others to safety, not by any individual worker taking the problem into their own hands.

Where the duty sits#

There is no single OSHA standard that governs workplace violence prevention across all industries, so the controlling authority is the General Duty Clause, Section 5(a)(1) of the OSH Act, which requires employers to furnish a workplace free from recognized hazards likely to cause death or serious physical harm — and OSHA treats workplace violence as exactly such a recognized hazard, citing employers who fail to abate a known workplace violence hazard. OSHA publishes guidance and recommended practices for higher-risk settings such as healthcare, social services, retail, and late-night work, but these are guidance rather than enforceable standards. The OSHA/NIOSH four-type classification — criminal intent, customer/client, worker-on-worker, and personal relationship — is the standard framework for assessing the hazard. Training and information duties run through 1926.21(b)(2). Some states go further than federal OSHA: California's SB 553, effective July 1, 2024, is the first mandatory workplace violence prevention law in the US, requiring most California employers to maintain a written prevention plan, a violent-incident log, and annual training, and OSHA has proposed a rule specifically for healthcare. Where your employer's program, a state law, or a specific standard sets a requirement, that requirement governs — and even without a detailed federal standard, the recognized-hazard duty requires the exposure to be assessed and managed.

What can go wrong?#

• A site prepares only for an armed stranger and is blindsided by an escalating coworker conflict.
• A threat is heard by the whole crew but nobody reports it, and it is acted on later.
• A pattern of intimidation gets written off as "just how they are" until it turns into violence.
• A worker being followed or harassed at work is told it's a personal matter, not a safety issue.
• An aggressive client interaction is met with confrontation instead of de-escalation, and it escalates.
• A worker confronts a person who is escalating, and triggers the very violence they meant to prevent.
• There is no clear reporting path, so warning signs never reach anyone who can act.
• Prevention is treated as a poster on the wall instead of an actual program.

How do we manage this properly?#

• Understand violence comes in four types — plan for all four, not just the dramatic stranger.
• Assess which types this site actually faces — public access, isolation, internal tensions.
• Learn the warning signs — threats, escalating conflict, intimidation, a frightened or followed worker.
• Report early warning signs through a clear path — a threat everyone hears but nobody reports helps no one.
• Treat coworker conflict and personal-relationship spillover as safety issues, not personal problems.
• De-escalate and disengage from an aggressive interaction — create distance and get help.
• Route it, don't confront it — warning signs go to supervisors, security, HR, or law enforcement.
• Know the reporting process before you need it, and know who to call for an immediate threat.

Before you start#

• Confirm everyone knows the four types of workplace violence and which ones this site faces.
• Confirm everyone knows the warning signs to watch for.
• Confirm there is a clear reporting path and everyone knows who to tell.
• Confirm the crew understands the response is to report and route, not to confront.
• Confirm everyone knows how to de-escalate and disengage from an aggressive interaction.
• Confirm workers know a personal-relationship threat at work is a safety issue they can report.
• Confirm everyone knows who to call for an immediate threat.
• Confirm reports are taken seriously and acted on, so people trust the process.

Talk it over#

• Which of the four types is this site most exposed to — and are we prepared for that one, not just the dramatic one?
• If someone heard a threat on this job today, would they know exactly who to tell — and would it be acted on?
• Do we treat escalating conflict between coworkers as a safety issue, or do we wait and hope?
• Does everyone understand that the response to a warning sign is to report it, not to handle it themselves?

The bottom line#

"Workplace violence" sounds like one thing — the stranger with a weapon — but OSHA treats it as four different hazards sorted by who the aggressor is: an outsider committing a crime, a client or member of the public, a coworker, or someone from an employee's personal life; and because each one gives different warning signs and needs a different defense, a site that prepares only for the dramatic stranger has left the other three doors open — and those three usually build slowly and visibly enough to stop, if someone is watching for them. The four types — criminal intent, customer/client, worker-on-worker, and personal relationship — each need their own defense, and the three beyond the armed stranger are both more common and more likely to give warning first. Because there is no OSHA checklist that makes you compliant, prevention has to be a program, not a poster: assess which types your site faces, learn the warning signs, build a reporting path so those signs reach someone who can act, and treat the slow-building kinds as real safety issues. Above every tactic sits one rule — route it, don't confront it — because the response to a warning sign is to get it to the trained people and get to safety, never to take it on yourself. It all rests on the recognized-hazard duty under 5(a)(1), OSHA's four-type guidance, and, in some states, stricter laws like California's SB 553. The question to carry is not "would we survive an attack?" It is: which of the four is building on this site right now — and does everyone here know exactly where to take it?

Frequently asked questions about workplace violence prevention#

What are the four types of workplace violence?

OSHA and NIOSH classify workplace violence into four types based on the aggressor's relationship to the workplace, because that relationship shapes both the warning signs and the prevention strategy. Type I is criminal intent: the aggressor has no legitimate relationship to the workplace and the violence occurs during a crime such as robbery, theft, or trespass — this is the "stranger with a weapon" most people picture. Type II is customer or client violence: the aggressor is a person receiving the workplace's services or present as a member of the public, such as a patient, customer, or student. Type III is worker-on-worker: the aggressor is a current or former employee, and its most common form is not physical assault but escalating verbal and emotional abuse. Type IV is personal relationship violence: the aggressor has a personal relationship with an employee — most often an intimate partner — and the violence spills from their personal life into the workplace. The key point is that these are four genuinely different hazards, and a prevention effort aimed at only one of them, usually Type I, leaves the other three unaddressed.

Doesn't OSHA have a workplace violence standard I can just follow?

Not a single, universal one — and understanding that changes how prevention has to work. There is currently no federal OSHA standard that governs workplace violence prevention across all industries, so there is no checklist that automatically makes a site compliant. Instead, OSHA treats workplace violence as a recognized hazard under the General Duty Clause, Section 5(a)(1) of the OSH Act, which requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm. That means an employer can be cited for failing to address a known workplace violence hazard, even though there is no specific rule spelling out exactly what to do. OSHA does publish guidance and recommended practices for higher-risk industries like healthcare, social services, and retail, but those are recommendations, not enforceable standards. Some states have gone further: California's SB 553, effective in 2024, is the first law in the US to require most employers to have a written workplace violence prevention plan, and OSHA has proposed a healthcare-specific rule. The practical takeaway is that prevention has to be a real program tailored to your site, not a box-checking exercise against a standard that does not exist.

If most workplace violence is unpredictable, what can we actually prevent?

The premise is worth correcting: most workplace violence is not actually unpredictable. The dramatic, out-of-nowhere attack — usually Type I criminal intent — is the hardest to foresee, but it is only one of the four types and not the most common. The other three, and especially worker-on-worker (Type III) and personal relationship (Type IV) violence, almost always build over time and leave visible warning signs: escalating conflict, direct or veiled threats, intimidation, a fixation on a grievance, a marked change in behavior, or a worker who seems frightened, is being followed, or is getting unwanted contact at work. These situations usually develop slowly enough that a prepared site can intervene while intervention is still possible. So the honest answer is that a great deal is preventable — not by predicting the unpredictable, but by watching for the warning signs the common types reliably give, and having a way to act on them. What defeats prevention is not unpredictability; it is warning signs that everyone notices and nobody reports.

What should I do if I notice a warning sign?

Report it, and route it to the people trained and authorized to handle it — do not take it on yourself. If you see a threat, an escalating conflict, a coworker fixated on a grievance, or a worker who is being followed or harassed, the right action is to tell your supervisor, site security, or the safety or HR staff, and to call law enforcement if there is an immediate threat. What you should not do is investigate it yourself, warn the aggressor off, try to mediate, or confront the person. Confronting someone who is escalating toward violence is one of the most reliable ways to trigger the very event you are trying to prevent, and it puts you directly in danger. Reporting is not overreacting or getting someone in trouble; it is getting the right information to the people who can assess it and act, while there is still time. The whole logic of prevention depends on warning signs actually reaching someone who can do something about them, which only happens if workers report what they see instead of assuming someone else will, or deciding it is not their business.

How is preventing violence from a coworker different from a robbery or an aggressive customer?

They are almost opposite problems, which is exactly why the four-type framework exists. A robbery (Type I) is defended mostly through physical security and procedures: access control, lighting, cash handling, and awareness of vulnerable moments — you are largely trying to deny opportunity to an outsider. An aggressive customer or client (Type II) is handled in the moment through de-escalation, positioning, and knowing how to disengage and get help — the person is supposed to be there, so the defense is about managing the interaction safely. Worker-on-worker violence (Type III) is different again: it usually grows out of ongoing conflict, threats, or intimidation among people who work together every day, so its prevention lives in the culture — whether early conflict and threatening behavior get reported and addressed or tolerated and ignored. And personal relationship violence (Type IV) is defended through awareness and support, recognizing that a worker being contacted, followed, or threatened at work by someone from their personal life is a workplace safety issue. Because the sources and warning signs are so different, the defenses are different, and a site has to think about all four rather than assuming one approach covers them.

Is workplace violence really a construction issue, or is it more of an office and healthcare problem?

It is a real issue on construction sites, even though some types are more associated with healthcare, retail, or public-facing work. Construction sites have their own exposure to each of the four types: remote or after-hours work zones and stored equipment and materials create Type I criminal-intent risk; work zones open to the public and interactions with frustrated drivers or residents create Type II exposure; the high-pressure, physically demanding, sometimes high-tension nature of crews creates Type III worker-on-worker risk, especially where conflict is allowed to escalate; and Type IV personal relationship violence can follow any worker to any job, including a construction site. The specific mix is different from a hospital or a store, which is exactly why the first step is assessing which types your particular site faces rather than assuming it is not relevant. Workplace violence is not confined to offices and healthcare; it is a recognized hazard across industries, and construction has its own version of all four types that a prevention program needs to account for.

Download the workplace violence prevention toolbox talk PDF#

Get this workplace violence prevention toolbox talk as a print-ready PDF — available in English, Spanish, Portuguese, and Turkish. Print it, hand it to the crew, and collect signatures on the included attendance sheet.

Download the PDF — free account required. New members get 5 free downloads.

Related toolbox talks#

• Active Assailant Training
• Bullying & Harassment
• Site Security
• Situational Awareness

Sources#

• OSHA, Workplace Violence and the General Duty Clause, OSH Act Section 5(a)(1) (there is no single OSHA standard governing workplace violence across all industries; OSHA treats workplace violence as a recognized hazard under the General Duty Clause and cites employers who fail to abate a known workplace violence hazard; OSHA publishes guidance and recommended practices rather than enforceable standards): https://www.osha.gov/workplace-violence
• NIOSH (CDC), Workplace Violence Four-Type Classification (workplace violence is sorted into four types by the aggressor's relationship to the workplace: Type I criminal intent, Type II customer/client, Type III worker-on-worker, Type IV personal relationship; each carries different risk patterns, warning signs, and prevention strategies): https://www.cdc.gov/niosh/topics/violence/
• Cal/OSHA, SB 553 — Workplace Violence Prevention (effective July 1, 2024) (the first mandatory workplace violence prevention law in the US, requiring most California employers to establish a written prevention plan, maintain a violent-incident log, and provide annual training; illustrates the trend toward mandatory programs beyond the federal General Duty Clause): https://www.dir.ca.gov/dosh/workplace-violence-prevention.html

This talk is general awareness guidance for training purposes. It does not replace your employer's workplace violence prevention program, the General Duty Clause, applicable state laws, or your security, HR, and safety staff's guidance, and it is not legal advice. If you are facing an immediate threat, contact your supervisor, security, or law enforcement. Where your employer's program or a state law sets a specific requirement, that requirement governs.

Written by FieldSafetyTalk's safety professional — a CSP, ASP, CHST and OSHA Authorized Outreach Trainer with 14+ years of international construction safety experience across federal, heavy civil, and industrial projects.

Hazards covered